What’s Vulnerable › Vulnerabilities

CVE-2023-30400

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-06-07 · updated 2026-06-17
• Weakness: CWE-77

Description

An issue was discovered in Anyka Microelectronics AK3918EV300 MCU v18. A command injection vulnerability in the network configuration script within the MCU's operating system allows attackers to perform arbitrary command execution via a crafted wifi SSID or password.

Affected products

• Anyka Ak3918Ev300 Firmware: 18

References

• https://arxiv.org/abs/2306.00610
• https://github.com/Nemobi/ak3918ev300v18
• https://arxiv.org/abs/2306.00610
• https://github.com/Nemobi/ak3918ev300v18

Get alerted when CVE-2023-30400 or the next vulnerability affects your stack